Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/0/3137302e38322e3136342e302f32322d3234203d3e203532363730.roa
File:                     3137302e38322e3136342e302f32322d3234203d3e203532363730.roa (raw, json)
Hash identifier:          HnFVfqTVR53RrbwhLsvdJtIXdAT0/kCq37oyYdgNOEI=
Subject key identifier:   68:9E:E2:F6:E8:C1:4B:54:1D:FF:02:BD:D7:21:90:A2:8E:2C:0C:F6
Certificate issuer:       /CN=31634B0E8F609720705B7B869FB16C93C056AD9D
Certificate serial:       4E010155CC893EAE5B353BD11A913A669E09E9B3
Authority key identifier: 31:63:4B:0E:8F:60:97:20:70:5B:7B:86:9F:B1:6C:93:C0:56:AD:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31634B0E8F609720705B7B869FB16C93C056AD9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/0/3137302e38322e3136342e302f32322d3234203d3e203532363730.roa
Signing time:             Wed 21 Jun 2023 14:36:44 +0000
ROA not before:           Wed 21 Jun 2023 14:31:44 +0000
ROA not after:            Wed 19 Jun 2024 14:36:44 +0000
asID:                     52670
IP address blocks:        170.82.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:01:01:55:cc:89:3e:ae:5b:35:3b:d1:1a:91:3a:66:9e:09:e9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31634B0E8F609720705B7B869FB16C93C056AD9D
        Validity
            Not Before: Jun 21 14:31:44 2023 GMT
            Not After : Jun 19 14:36:44 2024 GMT
        Subject: CN=689EE2F6E8C14B541DFF02BDD72190A28E2C0CF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e3:a9:ca:91:9e:62:d4:ff:58:69:b6:ee:53:
                    f4:59:18:80:d0:74:dd:86:93:95:4d:31:8b:c2:21:
                    26:74:a7:93:cf:be:1f:a6:1d:92:cd:75:62:7b:66:
                    09:c0:ec:85:bb:49:5a:8f:04:1c:56:24:78:e8:41:
                    d7:30:ae:b6:05:3b:b2:8d:62:57:22:de:31:bb:d2:
                    a1:1e:ac:22:70:4a:20:b0:f9:d1:68:48:5b:52:13:
                    13:3c:08:e8:7b:ef:53:18:fe:4d:a4:dd:70:6b:f1:
                    cc:5c:98:97:22:4c:72:d8:65:fc:a8:83:a5:46:ea:
                    f7:d7:6c:4a:6e:18:93:d9:0b:d2:19:39:de:b9:ee:
                    16:c8:da:a5:6f:39:ae:a2:e0:9e:9e:e3:93:13:08:
                    c3:57:fc:7d:aa:5d:18:b7:9d:09:ba:9d:df:07:56:
                    ac:45:b1:92:ef:93:d9:fa:89:ae:1f:91:81:3c:2a:
                    97:09:91:9b:63:3f:eb:8a:44:6f:a6:8b:4a:e8:32:
                    c5:0f:54:d3:02:80:65:50:ed:11:a6:f2:0e:76:00:
                    a6:d4:42:52:0c:94:f7:14:50:4a:96:a7:51:b7:83:
                    20:66:aa:bd:d6:66:f9:d0:d8:b7:3e:6e:d0:ba:63:
                    06:7d:8f:77:23:1a:19:fe:41:1a:12:2f:25:e6:9b:
                    1b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9E:E2:F6:E8:C1:4B:54:1D:FF:02:BD:D7:21:90:A2:8E:2C:0C:F6
            X509v3 Authority Key Identifier:
                keyid:31:63:4B:0E:8F:60:97:20:70:5B:7B:86:9F:B1:6C:93:C0:56:AD:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/0/31634B0E8F609720705B7B869FB16C93C056AD9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31634B0E8F609720705B7B869FB16C93C056AD9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/0/3137302e38322e3136342e302f32322d3234203d3e203532363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:5c:cd:ea:14:2f:26:7b:5b:83:f2:ea:42:78:47:82:ee:74:
         8e:3e:80:c3:ec:be:c0:45:dd:72:e7:e1:a7:31:d3:b2:5b:4f:
         48:e0:bc:de:4f:cc:0a:2f:c0:7a:f0:b9:f9:7b:83:95:59:c3:
         e3:97:0b:6c:93:f8:da:db:59:27:a3:a8:8b:54:da:43:f5:b7:
         3d:fb:01:7c:cc:ff:74:a2:51:e8:3f:26:a0:7a:35:79:b1:dd:
         3e:3c:6e:4e:38:59:77:f0:0a:ca:f5:3f:56:44:9a:85:21:9b:
         a5:79:fe:71:a0:a5:20:5d:ed:cf:00:e0:e0:13:72:e6:c5:4b:
         6a:6c:5a:27:66:bb:17:ad:06:cc:5f:af:39:c6:aa:1b:1d:e7:
         56:c7:4c:ed:dd:79:63:22:75:bd:8b:84:ac:89:2b:60:72:2c:
         ef:9b:32:69:d6:eb:0a:78:a6:de:35:7b:98:43:16:55:47:51:
         a7:44:50:39:d7:e2:be:26:10:97:9e:9d:bf:5c:e7:72:a0:51:
         2b:04:ef:e7:be:25:a5:b5:12:81:7b:68:8b:00:c2:62:28:15:
         3e:b3:de:f9:a5:44:fd:d2:01:6b:78:9d:08:80:ec:57:e3:c7:
         44:67:63:8e:cf:a8:9c:82:86:af:71:ec:35:95:34:dd:ba:b6:
         f7:8f:b8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org